Lucene search

K
cveMitreCVE-2024-24736
HistoryJan 29, 2024 - 4:15 a.m.

CVE-2024-24736

2024-01-2904:15:07
mitre
web.nvd.nist.gov
19
yahoopops
ypops
1.6
pop3
remote denial of service
vulnerability
cve-2024-24736

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.716

Percentile

98.1%

The POP3 service in YahooPOPs (aka YPOPs!) 1.6 allows a remote denial of service (reboot) via a long string to TCP port 110, a related issue to CVE-2004-1558.

Affected configurations

Nvd
Node
ypopsemailypops\!Match1.6
VendorProductVersionCPE
ypopsemailypops\!1.6cpe:2.3:a:ypopsemail:ypops\!:1.6:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.716

Percentile

98.1%